No Big Deal, But Google May Have Promoted a Contest to Get Kids’ Social Security Numbers [Updated]
"Doodle-4-Google" is so much more than an art contest. Sure, the game, which received 33,000 entries last year, celebrates "the creativity of young people" by having them send in a drawing under the theme "What I’d like to do someday …" But, there's another component, as well. It also helps Google collect some very personal data on students K through 12. Along with the submission, the contest's initial Parent Consent Form asked for the child's city of birth (not current city, mind you), date of birth, the last four digits of the child's social security number, as well as complete contact info for the parents. Bob Bowdon, who directed The Cartel, a documentary about corruption in the public-school system explained the significance:
You see what Google knows and many parents don't know is that a person's city of birth and year of birth can be used to make a statistical guess about the first five digits of his/her social security number. Then, if you can somehow obtain those last four SSN digits explicitly — voila, you've unlocked countless troves of personal information from someone who didn't even understand that such a disclosure was happening.
If the information Google culled from the contest was linked with other databases to target ads, it could prove lucrative for the company, which enlists promotional help from schools by offering prize money. But Bowdon says he has no evidence that Google has used what it learned for marketing purposes. Not to mention the fact that statistical guessing seems more manpower intensive than the type of passive data collection Google usually prefers (oh, hey there, Street View camera). However, within 26 hours of alerting the FTC, Google updated its consent form eliminating the request for the last four digits of the kid's social security number but leaving in the question about birth city. Okay, class. Who wants to send in a doodle under the theme "Be sort of evil until someone figures it out"?
Update: A Google spokesperson reached out to Intel for comment, noting that this the fourth year of the contest and the first time that the company requested Social Security information.
This year we started accepting doodles from kids even if their school hadn't registered for the contest. To help us keep entries distinct and remove duplicate entries from any particular student, we asked parents for limited information, including the last 4 digits of a student's social security number. We later updated our forms when we recognized that we could sufficiently separate legitimate contest entries while requesting less information. To be clear, these last 4 digits were not entered into our records and will be safely discarded.
The city of birth helps us identify whether contestants are eligible for the contest, as winners must be either U.S. citizens or permanent legal residents of the U.S. The information isn't used for any other purpose.
